# CVE-2026-54512: dogtag-pki: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

CVE-2026-54512 is fixed in 62 products on 1 platform, first by DEBIAN-CVE-2026-54512, released June 23, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-54512
- Priority: High
- CVSS: 8.1 (important)
- EPSS: 0.0107
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 23, 2026

## Description

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymorphic deserialization. When polymorphic typing is enabled and a type identifier contains generic parameters (i.e. the type ID string contains <), DatabindContext._resolveAndValidateGeneric() validates only the raw container class name (the substring before <) against the configured PTV. If the container type is approved, the method parses the full canonical type string via TypeFactory.constructFromCanonical() and returns the fully parameterized type without ever validating the nested type arguments against the PTV. The nested type arguments are then resolved, instantiated, and populated as beans during deserialization. An attacker who controls the type ID can therefore place a denied class as a generic type parameter of an allowed container — for example java.util.ArrayList<com.evil.Gadget> when only java.util.ArrayList is allow-listed. The container passes the PTV check; com.evil.Gadget is loaded via Class.forName(name, true, loader), instantiated, and its properties are set from attacker-controlled JSON. This completely bypasses an explicitly configured PTV allow-list. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | dogtag-pki RHEL 10 | 11.6.0-2.el10_0 | [RHSA-2026:44271](https://patchblox.com/security/data/fix/linux/rhsa-2026-44271.md) | Jul 23, 2026 |
| Linux | dogtag-pki rocky 10 | 0:11.9.0-4.el10_2.rocky.0.1 | [RLSA-2026:43400](https://patchblox.com/security/data/fix/linux/rlsa-2026-43400.md) | Jul 23, 2026 |
| Linux | eap8-activemq-artemis RHEL 10 | 2.40.0-8.redhat_00024.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-apache-cxf RHEL 10 | 4.1.7-1.SP1_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-artemis-wildfly-integration RHEL 10 | 2.0.5-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-bouncycastle RHEL 10 | 1.85.0-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-cryptacular RHEL 10 | 1.2.7-1.redhat_00002.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-eap-product-conf-parent RHEL 10 | 801.8.0-1.GA_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-hibernate RHEL 10 | 6.6.54-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-httpcomponents-asyncclient RHEL 10 | 4.1.5-5.redhat_00008.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-ironjacamar RHEL 10 | 3.0.22-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jackson-annotations RHEL 10 | 2.18.9-1.redhat_00003.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jackson-core RHEL 10 | 2.18.9-1.redhat_00003.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jackson-databind RHEL 10 | 2.18.9-1.redhat_00003.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jackson-dataformats-text RHEL 10 | 2.18.9-1.redhat_00003.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jackson-jaxrs-providers RHEL 10 | 2.18.9-1.redhat_00003.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jackson-modules-base RHEL 10 | 2.18.9-1.redhat_00003.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jackson-modules-java8 RHEL 10 | 2.18.9-1.redhat_00003.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jakarta-xml-bind-api RHEL 10 | 4.0.5-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jaxb RHEL 10 | 4.0.7-4.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jaxbintros RHEL 10 | 2.1.0-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jboss-logging RHEL 10 | 3.6.3-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jboss-remoting RHEL 10 | 5.0.31-1.SP2_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jbossws-api RHEL 10 | 3.1.0-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jbossws-common-tools RHEL 10 | 2.2.0-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jbossws-cxf RHEL 10 | 7.4.0-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jbossws-jaxws-undertow-httpspi RHEL 10 | 3.0.1-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jbossws-spi RHEL 10 | 5.1.0-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-jsf-impl RHEL 10 | 4.0.11-2.SP1_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-log4j RHEL 10 | 2.25.4-1.redhat_00003.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-neethi RHEL 10 | 3.2.2-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-netty RHEL 10 | 4.1.136-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-netty-transport-native-epoll RHEL 10 | 4.1.136-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-nimbus-jose-jwt RHEL 10 | 9.37.4-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-parsson RHEL 10 | 1.1.9-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-saaj-impl RHEL 10 | 3.0.6-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-slf4j RHEL 10 | 2.0.18-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-undertow RHEL 10 | 2.3.26-2.SP3_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-wildfly RHEL 10 | 8.1.8-9.GA_redhat_00006.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-wildfly-elytron RHEL 10 | 2.6.11-1.Final_redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-wildfly-javadocs RHEL 10 | 8.1.1-12.GA_redhat_00048.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-ws-commons-XmlSchema RHEL 10 | 2.3.2-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | eap8-xml-security RHEL 10 | 3.0.6-1.redhat_00001.1.el10eap | [RHSA-2026:70230](https://patchblox.com/security/data/fix/linux/rhsa-2026-70230.md) | Sep 23, 2026 |
| Linux | idm-pki-acme almalinux 10 | 11.9.0-4.el10_2.alma.1 | [ALSA-2026:43400](https://patchblox.com/security/data/fix/linux/alsa-2026-43400.md) | Jul 22, 2026 |
| Linux | idm-pki-acme ol 10 | 0:11.9.0-4.0.1.el10_2 | [ELSA-2026-43400](https://patchblox.com/security/data/fix/linux/elsa-2026-43400.md) | Jul 23, 2026 |
| Linux | idm-pki-base almalinux 10 | 11.9.0-4.el10_2.alma.1 | [ALSA-2026:43400](https://patchblox.com/security/data/fix/linux/alsa-2026-43400.md) | Jul 22, 2026 |
| Linux | idm-pki-base ol 10 | 0:11.9.0-4.0.1.el10_2 | [ELSA-2026-43400](https://patchblox.com/security/data/fix/linux/elsa-2026-43400.md) | Jul 23, 2026 |
| Linux | idm-pki-ca almalinux 10 | 11.9.0-4.el10_2.alma.1 | [ALSA-2026:43400](https://patchblox.com/security/data/fix/linux/alsa-2026-43400.md) | Jul 22, 2026 |
| Linux | idm-pki-ca ol 10 | 0:11.9.0-4.0.1.el10_2 | [ELSA-2026-43400](https://patchblox.com/security/data/fix/linux/elsa-2026-43400.md) | Jul 23, 2026 |
| Linux | idm-pki-java almalinux 10 | 11.9.0-4.el10_2.alma.1 | [ALSA-2026:43400](https://patchblox.com/security/data/fix/linux/alsa-2026-43400.md) | Jul 22, 2026 |
| Linux | idm-pki-java ol 10 | 0:11.9.0-4.0.1.el10_2 | [ELSA-2026-43400](https://patchblox.com/security/data/fix/linux/elsa-2026-43400.md) | Jul 23, 2026 |
| Linux | idm-pki-kra almalinux 10 | 11.9.0-4.el10_2.alma.1 | [ALSA-2026:43400](https://patchblox.com/security/data/fix/linux/alsa-2026-43400.md) | Jul 22, 2026 |
| Linux | idm-pki-kra ol 10 | 0:11.9.0-4.0.1.el10_2 | [ELSA-2026-43400](https://patchblox.com/security/data/fix/linux/elsa-2026-43400.md) | Jul 23, 2026 |
| Linux | idm-pki-server almalinux 10 | 11.9.0-4.el10_2.alma.1 | [ALSA-2026:43400](https://patchblox.com/security/data/fix/linux/alsa-2026-43400.md) | Jul 22, 2026 |
| Linux | idm-pki-server ol 10 | 0:11.9.0-4.0.1.el10_2 | [ELSA-2026-43400](https://patchblox.com/security/data/fix/linux/elsa-2026-43400.md) | Jul 23, 2026 |
| Linux | idm-pki-tools almalinux 10 | 11.9.0-4.el10_2.alma.1 | [ALSA-2026:43400](https://patchblox.com/security/data/fix/linux/alsa-2026-43400.md) | Jul 22, 2026 |
| Linux | idm-pki-tools ol 10 | 0:11.9.0-4.0.1.el10_2 | [ELSA-2026-43400](https://patchblox.com/security/data/fix/linux/elsa-2026-43400.md) | Jul 23, 2026 |
| Linux | jackson-annotations opensuse-leap 16.0 | 2.18.8-160000.1.1 | [OPENSUSE-SU-2026:21201-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21201-1.md) | Jul 1, 2026 |
| Linux | jackson-annotations rocky 9 | 0:2.21-1.el9_8 | [RLSA-2026:40895](https://patchblox.com/security/data/fix/linux/rlsa-2026-40895.md) | Jul 17, 2026 |
| Linux | jackson-annotations sles 15.6 | 2.18.8-150200.3.22.3 | [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 |
| Linux | jackson-annotations sles 15.7 | 2.18.8-150200.3.22.3 | [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 |
| Linux | jackson-annotations sles 16.0 | 2.18.8-160000.1.1 | [SUSE-SU-2026:22504-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22504-1.md) | Jul 1, 2026 |
| Linux | jackson-core opensuse-leap 16.0 | 2.18.8-160000.1.1 | [OPENSUSE-SU-2026:21201-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21201-1.md) | Jul 1, 2026 |
| Linux | jackson-core rocky 9 | 0:2.21.4-1.el9_8 | [RLSA-2026:40895](https://patchblox.com/security/data/fix/linux/rlsa-2026-40895.md) | Jul 17, 2026 |
| Linux | jackson-core sles 15.6 | 2.18.8-150200.3.22.3 | [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 |
| Linux | jackson-core sles 15.7 | 2.18.8-150200.3.22.3 | [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 |
| Linux | jackson-core sles 16.0 | 2.18.8-160000.1.1 | [SUSE-SU-2026:22504-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22504-1.md) | Jul 1, 2026 |
| Linux | jackson-databind Debian 14 | 2.18.11-1 | [DEBIAN-CVE-2026-54512](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54512.md) | Jun 23, 2026 |
| Linux | jackson-databind amzn 2023 | 2.16.1-4.amzn2023.0.2 | [ALAS2023-2026-1947](https://patchblox.com/security/data/fix/linux/alas2023-2026-1947.md) | Jul 20, 2026 |
| Linux | jackson-databind opensuse-leap 16.0 | 2.18.8-160000.1.1 | [OPENSUSE-SU-2026:21201-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21201-1.md) | Jul 1, 2026 |
| Linux | jackson-databind rocky 9 | 0:2.21.4-1.el9_8 | [RLSA-2026:40895](https://patchblox.com/security/data/fix/linux/rlsa-2026-40895.md) | Jul 17, 2026 |
| Linux | jackson-databind sles 15.6 | 2.18.8-150200.3.28.2 | [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 |
| Linux | jackson-databind sles 15.7 | 2.18.8-150200.3.28.2 | [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 |
| Linux | jackson-databind sles 16.0 | 2.18.8-160000.1.1 | [SUSE-SU-2026:22504-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22504-1.md) | Jul 1, 2026 |
| Linux | jackson-dataformats-binary sles 15.6 | 2.18.8-150200.3.21.3 | [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 |
| Linux | jackson-dataformats-binary sles 15.7 | 2.18.8-150200.3.21.3 | [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 |
| Linux | jackson-jaxrs-providers rocky 9 | 0:2.21.4-1.el9_8 | [RLSA-2026:40895](https://patchblox.com/security/data/fix/linux/rlsa-2026-40895.md) | Jul 17, 2026 |
| Linux | jackson-modules-base rocky 9 | 0:2.21.4-1.el9_8 | [RLSA-2026:40895](https://patchblox.com/security/data/fix/linux/rlsa-2026-40895.md) | Jul 17, 2026 |
| Linux | pki-jackson-annotations almalinux 9 | 2.21-1.el9_8 | [ALSA-2026:40895](https://patchblox.com/security/data/fix/linux/alsa-2026-40895.md) | Jul 16, 2026 |
| Linux | pki-jackson-annotations ol 9 | 0:2.21-1.el9_8 | [ELSA-2026-40895](https://patchblox.com/security/data/fix/linux/elsa-2026-40895.md) | Jul 20, 2026 |
| Linux | pki-jackson-core almalinux 9 | 2.21.4-1.el9_8 | [ALSA-2026:40895](https://patchblox.com/security/data/fix/linux/alsa-2026-40895.md) | Jul 16, 2026 |
| Linux | pki-jackson-core ol 9 | 0:2.21.4-1.el9_8 | [ELSA-2026-40895](https://patchblox.com/security/data/fix/linux/elsa-2026-40895.md) | Jul 20, 2026 |
| Linux | pki-jackson-databind RHEL 9 | 0:2.21.4-1.el9_8 | [RHSA-2026:40895](https://patchblox.com/security/data/fix/linux/rhsa-2026-40895.md) | Jul 18, 2026 |
| Linux | pki-jackson-databind almalinux 9 | 2.21.4-1.el9_8 | [ALSA-2026:40895](https://patchblox.com/security/data/fix/linux/alsa-2026-40895.md) | Jul 16, 2026 |
| Linux | pki-jackson-databind ol 9 | 0:2.21.4-1.el9_8 | [ELSA-2026-40895](https://patchblox.com/security/data/fix/linux/elsa-2026-40895.md) | Jul 20, 2026 |
| Linux | pki-jackson-jaxrs-json-provider almalinux 9 | 2.21.4-1.el9_8 | [ALSA-2026:40895](https://patchblox.com/security/data/fix/linux/alsa-2026-40895.md) | Jul 16, 2026 |
| Linux | pki-jackson-jaxrs-json-provider ol 9 | 0:2.21.4-1.el9_8 | [ELSA-2026-40895](https://patchblox.com/security/data/fix/linux/elsa-2026-40895.md) | Jul 20, 2026 |
| Linux | pki-jackson-jaxrs-providers almalinux 9 | 2.21.4-1.el9_8 | [ALSA-2026:40895](https://patchblox.com/security/data/fix/linux/alsa-2026-40895.md) | Jul 16, 2026 |
| Linux | pki-jackson-jaxrs-providers ol 9 | 0:2.21.4-1.el9_8 | [ELSA-2026-40895](https://patchblox.com/security/data/fix/linux/elsa-2026-40895.md) | Jul 20, 2026 |
| Linux | pki-jackson-module-jaxb-annotations almalinux 9 | 2.21.4-1.el9_8 | [ALSA-2026:40895](https://patchblox.com/security/data/fix/linux/alsa-2026-40895.md) | Jul 16, 2026 |
| Linux | pki-jackson-module-jaxb-annotations ol 9 | 0:2.21.4-1.el9_8 | [ELSA-2026-40895](https://patchblox.com/security/data/fix/linux/elsa-2026-40895.md) | Jul 20, 2026 |
| Linux | python3-idm-pki almalinux 10 | 11.9.0-4.el10_2.alma.1 | [ALSA-2026:43400](https://patchblox.com/security/data/fix/linux/alsa-2026-43400.md) | Jul 22, 2026 |
| Linux | python3-idm-pki ol 10 | 0:11.9.0-4.0.1.el10_2 | [ELSA-2026-43400](https://patchblox.com/security/data/fix/linux/elsa-2026-43400.md) | Jul 23, 2026 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.